We are implementing Spring Security for the several OSGi bundles in our project. For example, the URLs of bundle X and URLs of bundle Y are accessed by different users. What is the right way to implement Spring Security in OSGi? I couldn't find any document on that. What are the best practices to be followed?